How to Add a Cookie Banner to Squarespace (GDPR Compliant)

If you run a Squarespace website and have visitors from Europe, you need a cookie banner. This is not optional. The General Data Protection Regulation (GDPR) requires that websites get consent before placing non-essential cookies on a visitor's device. Squarespace does offer a built-in cookie banner, but whether it actually makes you compliant is another question entirely.

This guide walks you through the process of adding a cookie banner to your Squarespace site. We will cover the built-in option, third-party alternatives, and the mistakes that most Squarespace users make when setting this up.

Why Your Squarespace Site Needs a Cookie Banner

Every Squarespace site uses cookies. Even if you have not added any tracking scripts yourself, Squarespace places cookies for analytics, performance, and site functionality. If you have added Google Analytics, Facebook Pixel, or any marketing tool, your site places additional tracking cookies.

Under the GDPR, the ePrivacy Directive, and several other privacy laws, you must inform visitors about these cookies and get their consent before non-essential cookies are set. A cookie banner is the mechanism for doing this.

Without a cookie banner, you risk fines of up to 20 million euros or 4% of your annual global revenue under the GDPR. Even smaller enforcement actions can cost thousands. Beyond fines, you risk losing the trust of visitors who care about their privacy - and that group is growing every year.

Understanding the Squarespace Built-in Cookie Banner

Squarespace includes a basic cookie banner in all plans. It appears as a simple notification bar that informs visitors your site uses cookies. Here is how to find and enable it.

Step 1 - Open Your Squarespace Settings

Log into your Squarespace account and navigate to your site. In the left sidebar, click on "Settings." This opens the main settings panel for your website.

Step 2 - Navigate to Cookie Banner Settings

Inside Settings, scroll down and click on "Cookies & Visitor Data." On some Squarespace versions, this may appear under "Privacy" or "Legal." This section controls how your site handles cookies and what information visitors see.

Step 3 - Enable the Cookie Banner

Toggle the cookie banner to "On." You will see a preview of the default banner, which typically appears as a bar at the bottom of the page. Squarespace gives you a few options here:

• Banner text: You can customize the message visitors see. The default text is generic and tells visitors the site uses cookies.
• Link to privacy policy: You should add a link to your privacy policy page. If you do not have one yet, create one before proceeding.
• Button text: Customize what the accept button says. "Accept" or "Got it" are common choices.

Step 4 - Customize the Appearance

Squarespace lets you adjust the banner's position (top or bottom of the page), the background color, and the text color. Keep it readable. A banner that blends into the background defeats the purpose.

Step 5 - Save and Test

Click "Save" and open your site in a private browsing window to see how the banner looks. Click through the site to make sure it appears on every page, not just the homepage.

The Problem with the Built-in Squarespace Cookie Banner

The built-in cookie banner is better than nothing, but it has significant limitations that can leave you non-compliant.

It Does Not Block Cookies Before Consent

This is the biggest issue. The Squarespace cookie banner is an informational notice. It tells visitors that cookies are used. But it does not actually prevent cookies from being set before the visitor clicks "Accept." Under the GDPR, cookies must not be placed until the visitor gives consent. An informational banner alone does not satisfy this requirement.

It Does Not Offer Granular Consent

GDPR compliance requires that visitors can choose which categories of cookies they accept. For example, a visitor should be able to accept functional cookies but reject marketing cookies. The built-in Squarespace banner offers a single "Accept" button with no category controls.

It Does Not Record Consent

You need to keep a record of when and how visitors gave consent. If a regulator asks, you should be able to show that a specific visitor consented to cookies at a specific time. The built-in banner does not store or manage consent records.

It Lacks a Reject Option

Under GDPR guidelines, rejecting cookies should be as easy as accepting them. If you have an "Accept" button, you should also have a "Reject" button that is equally prominent. The default Squarespace banner does not include this.

For a deeper look at what a compliant cookie banner should include, see our guide to GDPR banner examples.

Using a Third-Party Cookie Banner on Squarespace

Because of the limitations above, many Squarespace users turn to third-party cookie consent tools. These tools provide the blocking, granular consent, and record-keeping that the built-in banner lacks.

How to Add a Third-Party Cookie Banner to Squarespace

Most third-party cookie tools work by adding a JavaScript snippet to your site. Here is the general process:

Step 1 - Sign up for a cookie consent tool. Choose a tool that fits your needs and budget. Options include Cookiebot, CookieYes, Termly, and others. Each provides a script to add to your site.

Step 2 - Get the installation script. After signing up, the tool will generate a JavaScript snippet. Copy this snippet.

Step 3 - Add the script to Squarespace. In your Squarespace dashboard, go to "Settings" then "Advanced" then "Code Injection." Paste the script into the "Header" section. This ensures the cookie banner loads on every page before any other scripts run.

Step 4 - Configure cookie categories. Most tools automatically scan your site for cookies and categorize them (necessary, analytics, marketing, etc.). Review these categories and make sure they are accurate.

Step 5 - Disable the built-in Squarespace banner. Go back to "Cookies & Visitor Data" in your Squarespace settings and turn off the built-in banner. Running two cookie banners at once confuses visitors and creates a poor experience.

Step 6 - Test the banner. Open your site in a private window. Verify that the banner appears, that you can accept or reject cookies, and that non-essential cookies are actually blocked until consent is given.

Want to know if your setup is working? Scan your Squarespace site for compliance issues with a free scan to see what cookies are being set and whether consent is properly managed.

Choosing the Right Third-Party Tool

When evaluating third-party cookie banner tools for Squarespace, consider these factors:

• Automatic cookie scanning: The tool should detect cookies on your site without manual configuration.
• Cookie blocking before consent: It should prevent non-essential cookies from firing until the visitor consents.
• Granular consent options: Visitors should be able to accept or reject individual cookie categories.
• Consent logging: The tool should store records of when visitors gave or withdrew consent.
• Squarespace compatibility: Some tools work better with Squarespace than others. Check for known issues or limitations.
• Price: Many tools have free tiers for small sites. Compare what you get at each price level.

For a detailed comparison of the most popular options, read our GDPR compliance software comparison.

Common Squarespace Cookie Banner Mistakes

Setting up a cookie banner is not complicated, but many Squarespace users make the same mistakes. Here are the most common ones and how to avoid them.

Mistake 1 - Using Only the Built-in Banner and Assuming Compliance

As discussed above, the built-in banner is informational. It does not block cookies or offer granular consent. If you rely on it alone, you are likely not GDPR compliant.

Mistake 2 - Not Including a Link to Your Cookie Policy

Your cookie banner should link to a detailed cookie policy or privacy policy that explains what cookies you use, why you use them, and how visitors can manage their preferences. A banner without this link is incomplete.

Mistake 3 - Making the Reject Option Hard to Find

Some site owners design their banners with a large, colorful "Accept" button and a small, gray "Reject" link tucked in a corner. This is called a "dark pattern," and regulators have started penalizing it. Both options should be equally visible and easy to use.

Mistake 4 - Forgetting About Third-Party Embeds

If your Squarespace site embeds YouTube videos, Google Maps, social media feeds, or other third-party content, these embeds often place their own cookies. Your cookie consent setup needs to account for them. Many site owners forget this and end up with tracking cookies firing before consent.

Mistake 5 - Not Testing After Setup

Set up is only half the job. You need to test the banner regularly. Clear your cookies, visit your site, decline all cookies, and then check whether any non-essential cookies were set anyway. Browser developer tools or a compliance scanning tool can help with this.

Mistake 6 - Ignoring Updates

Both Squarespace and third-party tools update regularly. A plugin update or Squarespace platform change can break your cookie banner without warning. Check your banner at least once a month to make sure it still works.

How to Configure Your Cookie Banner for Different Privacy Laws

The GDPR is the most well-known cookie consent law, but it is not the only one. Depending on where your visitors are located, you may need to comply with multiple regulations.

GDPR (European Union)

Requires opt-in consent before any non-essential cookies are set. Visitors must be able to reject cookies as easily as they accept them. You must keep consent records.

CCPA / CPRA (California, US)

Does not require opt-in consent for cookies, but does require a "Do Not Sell or Share My Personal Information" link. If you use cookies for targeted advertising, California visitors must be able to opt out.

LGPD (Brazil)

Similar to GDPR in many respects. Requires a legal basis for data processing and gives individuals rights over their personal data.

POPIA (South Africa)

Requires consent for processing personal information and mandates transparency about how data is used.

If your Squarespace site gets traffic from multiple regions, configure your cookie banner to show different options based on the visitor's location. Most third-party tools support geotargeting, which adjusts the banner's behavior depending on where the visitor is browsing from.

For a full breakdown of what each law requires, see our GDPR compliance checklist.

Testing Your Squarespace Cookie Banner

After setting up your banner, you need to verify that it works correctly. Here is a simple testing process:

1. Open your site in a private or incognito browser window.
2. Before interacting with the cookie banner, open your browser's developer tools (F12 on most browsers) and go to the "Application" or "Storage" tab.
3. Check what cookies are present. Only strictly necessary cookies should be set at this point.
4. Click "Reject All" on the cookie banner.
5. Browse several pages. Check the cookies again. No new non-essential cookies should appear.
6. Clear your cookies and visit the site again.
7. This time, click "Accept All."
8. Check that analytics and marketing cookies are now present.

If non-essential cookies appear before you interact with the banner, or after you reject them, your setup is not working correctly.

The fastest way to check is to use an automated scanning tool. Scan your Squarespace site and get a detailed report showing which cookies are set, whether consent is being collected properly, and what needs to be fixed.

What a Compliant Squarespace Cookie Banner Looks Like

A properly configured cookie banner on Squarespace should include all of the following elements:

• A clear statement that the site uses cookies
• A brief explanation of why cookies are used
• An "Accept All" button
• A "Reject All" button of equal size and prominence
• A link to manage cookie preferences by category
• A link to your full cookie policy or privacy policy
• No pre-checked boxes for non-essential cookie categories
• Actual blocking of non-essential cookies until consent is given

The banner should appear on the first visit and not appear again after the visitor makes a choice, unless their consent expires (typically after 6 to 12 months).

Summary

Adding a cookie banner to Squarespace is straightforward, but making it GDPR compliant takes more than just toggling the built-in option. The default Squarespace cookie banner is a starting point, not a complete solution. For genuine compliance, you need a tool that blocks cookies before consent, offers granular choices, and keeps consent records.

Whether you use the built-in banner with manual script management or a third-party tool, the most important thing is to test your setup and make sure it actually works as intended.

Check your cookie compliance with a free scan to see exactly where your Squarespace site stands.